RHSA-2010:0533: Moderate: pcsc-lite security update
PC/SC Lite provides a Windows SCard compatible interface for communicatingwith smart cards, smart card readers, and other security tokens.Multiple buffer overflow flaws were discovered in the way the pcscd daemon,a resource manager that coordinates communications with smart card readersand smart cards connected to the system, handled client requests. A localuser could create a specially-crafted request that would cause the pcscddaemon to crash or, possibly, execute arbitrary code. (CVE-2010-0407,CVE-2009-4901)Users of pcsc-lite should upgrade to these updated packages, which containa backported patch to correct these issues. After installing this update,the pcscd daemon will be restarted automatically.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2010:0533?
The severity of RHSA-2010:0533 is classified as moderate.
How do I fix RHSA-2010:0533?
To fix RHSA-2010:0533, upgrade to the patched version 1.4.4-4.el5_5 of the affected packages.
Which packages are affected by RHSA-2010:0533?
The affected packages include pcsc-lite, pcsc-lite-devel, pcsc-lite-doc, and pcsc-lite-libs.
What types of vulnerabilities are found in RHSA-2010:0533?
RHSA-2010:0533 contains multiple buffer overflow flaws in the pcscd daemon.
Who is responsible for addressing RHSA-2010:0533?
Red Hat is responsible for addressing RHSA-2010:0533 and providing security updates.